Installing on AIX

SSH Tectia ConnectSecure is available for IBM AIX 6.1 and 5L version 5.3 (with maintenance level 5), both on the POWER architecture.

The downloaded online installation package contains the compressed installation files. On the CD-ROM, the installation packages are located in directory /install/aix/.

Two packages are required: one for common components of SSH Tectia ConnectSecure and SSH Tectia Server, and one for specific components of SSH Tectia ConnectSecure.

With SSH Tectia ConnectSecure you may choose to install:

the basic client package or the client-ft-only package without the sshg3 program
the optional capture package for FTP-SFTP conversion and transparent tunneling
Note that with AIX 6.1, the Enhanced Role Based Access Control (RBAC) mode has to be reconfigured or disabled when the capture is used.
the additional sdk package containing the file transfer API in C.

To install SSH Tectia ConnectSecure on AIX, follow the instructions below:

Unpack the installation packages:

$ uncompress ssh-tectia-common-<version>-aix-5-6-powerpc.bff.Z
$ uncompress ssh-tectia-client-<version>-aix-5-6-powerpc.bff.Z
$ uncompress ssh-tectia-capture-<version>-aix-5.3-powerpc.bff.Z

In the commands, <version> indicates the product release version and the current build number (for example, 6.1.9.123).

Install the packages by running the following commands with root privileges:

# installp -d ssh-tectia-common-<version>-aix-5-6-powerpc.bff SSHTectia.Common
# installp -d ssh-tectia-client-<version>-aix-5-6-powerpc.bff SSHTectia.Client
# installp -d ssh-tectia-capture-<version>-aix-5.3-powerpc.bff \ 
              SSHTectia.Capture

(Optional) If you do not want to install the sshg3 command, unpack and install the client-ft-only package instead of the client package with root privileges:
```
$ uncompress ssh-tectia-client-ft-only-<version>-aix-5-6-powerpc.bff.Z
# installp -d ssh-tectia-client-ft-only-<version>-aix-5-6-powerpc.bff \ 
              SSHTectia.ClientF
```
Note
If you later need to start using the sshg3, you must first uninstall the client-ft-only package before you can install the client package.

	Note
If you later need to start using the `sshg3`, you must first uninstall the `client-ft-only` package before you can install the `client` package.

(Optional) If you want the file transfers API, unpack and install the SDK installation package with root privileges:

$ uncompress ssh-tectia-sdk-<version>-aix-5-6-powerpc.bff.Z
# installp -d ssh-tectia-sdk-<version>-aix-5-6-powerpc.bff SSHTectia.SDK

Copy the license file to directory: /etc/ssh2/licenses. (This is not necessary in "third-digit" maintenance updates.) For information on licensing, see Licensing.

On AIX 6.1, the default configuration of Enhanced Role Based Access Control (RBAC) prevents system binaries, such as FTP and Telnet, from working. In order to be able to use the ssh-tectia-capture features, such as FTP-SFTP conversion, you need to either configure RBAC to permit capture on the relevant binaries or disable RBAC completely. Consult IBM documentation on RBAC for the configuration instructions.

To disable RBAC, follow these instructions:

To check if RBAC is enabled, enter command:
```
$ lsattr -El sys0 |grep RBAC
```
If RBAC is enabled, you get the response:
```
enhanced_RBAC true Enhanced RBAC Mode True
```
To disable RBAC, enter command:
```
$ chdev -l sys0 -a enhanced_RBAC=false
```
Reboot the computer.